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IN rHECr^AlMS: 



1 . (Original) A method of verifying Ihc integrily of vmaiitlieiilicated code, 
comprising: 

receiving automatically aiilhcnlicated code, tlie automalically authenlicatcd code 
including an embedded first hash value ofthe luiaullicnlicatcd code; 
rcccivi nj^ llic uiiaiithenLicatcd code; 

generaliiig a second hash value ofthe unaulhonticaled code; 
comparing lUc firsUmsh value and the second hash value; and 
verifying the integrity ofthe imaulhenticaled code if the first hash value and the 
second hash value match. 

2. (Curiently Amended) The method of claim 1 , wherein the automatically 
authenticated code is compiled Jftvit platfiiimi'lidcjiriidcj^^ code and wherein the 
unauthcnlieatod code is native code. 

3. (Cun cntly Amended) The method of claim 1 , wherein the auioii^atically 
autlienticatcd code is a *ava pMmmjndeacjidcnt application or applet and wherein tlic 
unauthcnticated code is a dynamically linked library. 

4. (Original) The method ofclaira 1 , wherein tlie first hash value is obtained using a 
hoshing function and wherein gcncialitig a second hash value ofthe unaiithenticatcd code 
inclndcs using the same hashing function as was used to obtain the first hash value. 

5. (Orifiinal) The method of claim 4. wherein ;he hashing function is identified 
ba.scd on information stored in the automatically aolhcnlicatcd code. 

6. (Original) The method of claim 1 , further compiising: 

cxcculing the uulomatically authenticated code using a virtual macliine; and 
sending a request to a server from which Ih^ automatically authenticated code was 
received, Ihe request being for the unaudicnticated code. 
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7. (Original) The metbod of claim 1, wherein, illhe first hash value and the second 
hash value do not tnalch, ihc method further comprises: 

receiving the unauthenlieated code again; 
gcncralhig i\ third hash vahie of tlic imaiitlieiilicatcd code; aiid 
comparing the first hash value and ihc third hasli value. 

8. (Orighial) The mcLliod of claim 7, wherein if die third hash value and the first 
h:ish value do \iot match, the meU^od further comprises: 

comparing Ihe second hash value and the tliird hash value; and 
if the second hash value and the third hash viiluc match, determining that the 
unauthenlicated code has been conuptcd intentionally. 

9. (Original) fhc method of claim 8, wherein if the second hash value and the third 
ha.sh value do not miitch, it is dctcnnined that the unauthenlicated code has been 
corrupted uainlentionally. 

10. (Original) Tlic method of claim 1, when^in the method is implemented in a virtual 
machine associated with a web browser on a client device. 

1 1 . (Original) An apparat\is for verifying the integrity of unauthenticatcd code, 
comprising: 

a virtual machine; and 

an unauthoiiticaled code verification element, wherein the virtual machine 
receives automatically authenticated code, the automatically authenticated code including 
an embedded first hash value of the unauthenticatcd code, and receives the 
unauthenticatcd code, and wherein 

the unauthenticuied code verification element generates a second hash value of 
the unauthenlicated code, compares the first hash value ajid the second hash value, and 
veri fics the integrity of the unauthenticatcd code if the first hash value and the second 
hash value match. 
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1 2. (Cuneiilly Amended) The .-ipparatus ofclaim 1 1 , whcrem the aulonmtically 
.uilliciilicalcd code is compiled Java plat fonti in dejicndct^t code and whcrciii the 
iiniiiinicalicalcd code is native code. 

13. (CuircnUy Amended) lliie apparatus ofclaim \ 1, wherein the autojuatically 
aulhcnticatctl code is a Java phit'br"^ independent apj.>lication or applet and wherein the 
unaiilhontieated code is a dynamically Unked library, 

14. (Orisljial)Tiic apparatus ofclaim 11, wherein the first hash value is ohtained 
iisint; a hasliing function and wiierein the nnaulhcntiealcd code verification element 
jjcncrates a second hash value of the unauUicnticattt) code using the same hashing 
funclion as was used to obtain the first hash value. 

15. (Original) The apparalu.s ofclaim 14, wherein the hashing funclion is identified 
by the nnaiitlienlicatcd code vcrificalion clement ba^;ed on information stored in the 
aiitornatically authenticated code. 

16. (Original) The apparatus ofclaim 11 . wherein the virtual machine executes the 
automatically authenticated code and 

sends a request to a server fi om which the automatically authenticated code was received, 
the rcfiucsl being for the unauthenticatcd code. 

17. (Original) The apparatus ofclaim 11, wherein, if the first hash value and the 
second hash value do not match, the virtual machine receives the unauthenticatcd code 
again, the unauthenticatcd code verification elemeiit fienerales a third hash value of the 
unauthenticatcd code and compares the first hash value and the third hash value. 
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18. (Original) 'llie appavaius of claim 17, whcrcio if the third hash value and the first 
hash vnhic do not match, tho unaulhciilicated code vcdficaiioii elemctit compares the 
second hash value and the third bash vaUie and, if th<: second hash value aiid the third 
hash value match, dclcnuiiics that the unauthenticatcil code has been corrupted 
jiitonlionally. 

1 9. (Original) The apparatus of claim 1 8. wherein if the second hash value and the 
ihird hash value do not match, the unauthenlicatcd code vcrincatioii element determines 
llial the uiiauthtfiiticaicd code has been coniipted unintenl ion ally. 

20. (Original) The apparatus of claim 1 1 , wherein the virtual machine and the 
unautlicnticaicd code verification clement arc associated with a web browser on a client 
tlevicc, 

21. (Original) A computer prosram product in a computer readable medium for 
verifying the integrity of unauthenlicatcd code, comprising: 

(Irst instructions for receiving automatically oulhcnticalcd code, the automatically 
aulhcniicated code including an embedded fii-st hash value of the unauthenticated code; 
second instnictions for receiving the unauthenticated code; 
third inslmclions for generating a second h;nh value of the unauthenlicatcd code; 
fourth instructions for com])aring the first hash value and the second hash value; 

and 

liftli instructions for verifying the integrity ofthe unauthenlicatcd code if the fust 
ha.<!li vahie and tlic second hash value match. 

22. (Currently Amended) The computer program product of claim 21 , wherein the 
aulomatically authenticated code is compiled Javii pJatXaoTimdcEcndcm code and 
wherein the unauthenticated code is native code. 
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23. (Ciivrcntly Amended) The computer program product of claim 21 , wherein the 
luiioniatically authenticated code is a Jav« ubtfoanJl'dsncndcnt application or applet and 
wherein the iinauthcnlicatcd code is a dynamically li>iked library. 

24. (Oiiginal) The computer program product of claim 21 , wherein the first hash 
value \5 obtained using a hashing function and wher^'.in the third instructions ibr 
generating a second hash value of the uuauthenticatcd code include instructions for using 
the stimc hashing function as was used to obtain the tirst hash value. 

2 5. (Original) The computer program product of claim 24, further comprising 
instnictions for identifying the hashing function bas.;d on information Stored in the 
fiutomatically authenticated code. 

20. (Originfil) l iie computer program product of claim 21 , further comprising: 
sixth instructions for executing the automatically authenticated cod© using a 

virtual machine; and 

seventh instruclions for sending a request to ii server from which the 
iiutomatically authenticated code was received, the request being for the unautheuticated 
code. 

27. (Original) The covnputcr program product of claim 21, further comprising: 

sixth insiniclions for receiving the unauthcnlicatcd code again, i fthc first hash 

viduc and the second hash value do not match; 

seventh instructions for generating a third luish value of the unautheuticated code; 

and 

eighth in.slruclions for comparing the first hash value and the third hash value. 
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28. (Orie'mal) The computer prosifsim product of claim 27, fm thcr comprising: 

jiinLU instinctions for comparing the second liasli value and Ihc third hash value, if 
Ihc third ivash value nnd the first hash value do not iv.ntch; and 

tcnih inslniclions for determining Uiat the ur:iulhcnticated code has been 
iiplcd intentionally, if the second hash value and the third hash value match. 



comi 



29. (Original) The computer program product of claim 28, further comprising 
dcvcnth instructions for determining that the unaulhunticated code has been corrupted 
unintentionally, if the second hash value and tltc third hash value do not match. 
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